Compaq OpenVMS TCP/IP Services SNMP Denial Of Service Vulnerability
BID:4138
Info
Compaq OpenVMS TCP/IP Services SNMP Denial Of Service Vulnerability
| Bugtraq ID: | 4138 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 18 2002 12:00AM |
| Updated: | Feb 18 2002 12:00AM |
| Credit: | This vulnerability was announced in a Compaq Security Advisory on February 18, 2002. |
| Vulnerable: |
Compaq TCP/IP Services For OpenVMS 5.3 |
| Not Vulnerable: | |
Discussion
Compaq OpenVMS TCP/IP Services SNMP Denial Of Service Vulnerability
OpenVMS is a mainframe-like Operating System. It was originally developed by Digital, and now distributed and maintained by Compaq.
It has been discovered that TCP/IP Services for OpenVMS systems are vulnerable to the problems reported in Bugtraq ID 4088 "Multiple Vendor SNMP Trap Handling Vulnerabilities" and 4089 "Multiple Vendor SNMP Request Handling Vulnerabilities." An access violation (ACCVIO) may occur on vulnerable OpenVMS systems when a specific type of SNMP traffic is sent to the vulnerable system. This could cause the SNMP agent to crash. It has been reported by Compaq that this problem can not be used to compromise system security, as the SNMP agent is run from a non-privileged process. Additionally, the SNMP agent may crash, but will likely be restarted when the next SNMP service request is received.
OpenVMS is a mainframe-like Operating System. It was originally developed by Digital, and now distributed and maintained by Compaq.
It has been discovered that TCP/IP Services for OpenVMS systems are vulnerable to the problems reported in Bugtraq ID 4088 "Multiple Vendor SNMP Trap Handling Vulnerabilities" and 4089 "Multiple Vendor SNMP Request Handling Vulnerabilities." An access violation (ACCVIO) may occur on vulnerable OpenVMS systems when a specific type of SNMP traffic is sent to the vulnerable system. This could cause the SNMP agent to crash. It has been reported by Compaq that this problem can not be used to compromise system security, as the SNMP agent is run from a non-privileged process. Additionally, the SNMP agent may crash, but will likely be restarted when the next SNMP service request is received.
Exploit / POC
Compaq OpenVMS TCP/IP Services SNMP Denial Of Service Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Compaq OpenVMS TCP/IP Services SNMP Denial Of Service Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Compaq OpenVMS TCP/IP Services SNMP Denial Of Service Vulnerability
References:
References: